MediaController > Upload should only request permission for Media.Upload else the editor template Media isn't usable in the frontend

Author: Michael-Herzog

src/Presentation/SmartStore.Web/Administration/Controllers/MediaController.cs

@@ -15,7 +15,6 @@
 
 namespace SmartStore.Admin.Controllers
 {
-    [AdminAuthorize]
     public class MediaController : AdminControllerBase
     {
         private readonly IMediaService _mediaService;
@@ -116,6 +115,7 @@ public async Task<ActionResult> Upload(string path, string[] typeFilter = null,
         }
 
         //[ChildActionOnly]
+        [AdminAuthorize]
         [HttpPost]
         public ActionResult FileConflictResolutionDialog()
         {
@@ -127,6 +127,7 @@ public ActionResult FileConflictResolutionDialog()
             return PartialView();
         }
 
+        [AdminAuthorize]
         public ActionResult MoveFsMedia()
         {
             var count = DataMigrator.MoveFsMedia(Services.DbContext);

src/Presentation/SmartStore.Web/Views/Shared/EditorTemplates/Media.cshtml

@@ -31,6 +31,14 @@
         }
     }
 
+    private DuplicateFileHandling DuplicateFileHandling
+    {
+        get
+        {
+            return GetMetadata<DuplicateFileHandling?>("duplicateFileHandling") ?? DuplicateFileHandling.ThrowError;
+        }
+    }
+
     private string TypeFilter
     {
         get
@@ -117,7 +125,7 @@
 
         <div class="fu-controls">
             @(Html.SmartStore().FileUploader()
-                .UploadUrl(Url.Action("Upload", "Media", new { isTransient = TransientUpload, path = Path, area = "Admin" }))
+                .UploadUrl(Url.Action("Upload", "Media", new { isTransient = TransientUpload, path = Path, area = "Admin", duplicateFileHandling = DuplicateFileHandling }))
                 .Path(Path)
                 .TypeFilter(TypeFilter)
                 .ShowRemoveButton(!MultiFile && Model.HasValue) // Multifile uploads don't need a remove button.